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(57) When digital content is recorded, identification 
information for the digital content and a random number 
are recorded on each of a nonvolatile memory (110) and 
an internal HDD (104). When the digital content is 
moved from the internal HDD (1 04) to another recording 
medium (4) t the random number recorded in the non- 
volatile memory (1 1 0) and the random number recorded 
on the internai HDD (104) are compared to see if they 
match. Also, an offset value that indicates a location of 
a previous end-point at which the digital content has 
been ended to be read Is read from the internal HDD 
(104), and the read offset value is compared with a lo- 
cation of a start-point at which the digital content is start- 
ed to be read. If the random numbers match and the 
location of the start-point is greater than the offset value, 
the digital content is permitted to be moved. 
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Description 

BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

[0001 J The present invention relates to a digital con- 
tent management device and a digital content manage- 
ment program for managing digital content to block its 
unauthorized use. In particular, the present invention re- 
lates to a technique for improving user convenience 
while blocking unauthorized use of the digital content. 

(2) Related Art 

[0002] With the start ot BS digital broadcasting, works 
such as movies have been distributed widely as digital 
content In recent years. Because digital content can be 
copied easily and also can be transferred readily via the 
Internet or other media, concerns are rising over piracy 
acts or redistribution of unauthorized copies of digital 
content. In response to these concerns, various tech- 
niques have been developed for protecting digital con- 
tent. 

[0003] One example of specifications relating to such 
techniques for protecting digital content is DTCP (Digital 
Transmission Content Protection). DTCP Is a technique 
used in digitally transferring digital content, to block un- 
authorized copying by such methods as encrypting the 
digital content. According to the digital content protec- 
tion technique like DTCP, CCI (Copy Control Informa- 
tion) that can be set to show "Copy No More", "Copy 
One Generation 0 , and the like, is attached to digital con- 
tent. 

[0004] The CCI showing "Copy No More" indicates 
that copying of digital content is prohibited. The CCI 
showing "Copy One Generation" indicates that copying 
of digital content is permitted only once. Accordingly, 
when digital content with the CCI showing "Copy One 
Generation" is copied, digital content newly obtained by 
the copying is provided with the CCI showing "Copy No 
More". 

[0005] Applying this digital content protection tech- 
nique to devices such as digital video recorders is effec- 
tive in blocking unauthorized copying of digital content. 

PROBLEMS TO BE SOLVED BY THE INVENTION 

[0006] However, digital content whose CCI shows 
"Copy No More" may be required to be moved to another 
recording medium, like when the user wishes to copy 
such digital content with the CCI showing "Copy No 
More" recorded on an HDD (Hard Disk Drive) internally 
provided in a digital TV set, to a DVD-RAM, so as to 
keep it as one's favorite. In this case, the digital content 
recorded on the internal HDD should be placed into an 
unusable state so as notto increase copies of the digital 
content. 
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[0007] As one method for moving the digital content 
without Increasing Its copies, the entire digital content 
Is first copied from the internal HDD to the DVD-RAM, 
and then the digital content originally recorded on the 

5 internal HDD is nullified, i.e., placed into an unusable 
state, by deleting the original digital content or the like. 
[0008] In this case, however, a certain operation may 
enable the digital content to be moved any number of 
times, thereby failing to block unauthorized copying of 

10 the digital content. The following describes such an 
operation . Before the digital content is moved, the in- 
ternal HDD is removed from the digital TV set and con- 
nected to a personal computer, to create backup data. 
Then, afterthe digital content is moved, the backup data 

15 is recorded onto the internal HDD. 

[0009] Further, an accident such as a breakage of a 
power supply may occur during moving of the digital 
content, causing both the original digital content and a 
copy of the original digital content that is being moved, 

20 to be damaged and to become unusable. This results in 
real inconvenience for the user of the digital content. 
This may even result In an economic loss In some cases, 
like when an additional payment Is required to obtain 
such digital content that has become unusable. 

25 

SUMMARY OF THE INVENTION 

[0010] In view of the above problems, the object of the 
present invention is to provide a digital content manage- 
so ment device and a digital content management method 
for enabling digital content to be moved without being 
damaged, while blocking unauthorized copying of the 
digital content. 

[001 1 ] To achieve the above object, the digital content 

35 management device of the present invention is a digital 
content management device including: a first storing 
unit operable to store digital content and first manage- 
ment Information for the digital content; a second storing 
unit operable to store second management information 

40 for the digital content; a management information judg- 
ing unit operable to judge, before the digital content is 
used, whether the digital content is permitted to be used 
or not, by comparing the first management information 
with the second management information; and a man- 

45 agement information updating unit operable to update 
the first management information and the second man- 
agement Information, when a Judgment resuit by the 
management Information Is affirmative and the digital 
content is used. 

so [0012] According to this construction, for example 
when digital content Is recorded on an HDD Internally 
provided in a digital TV set, the device judges whether 
such an operation has been performed or not as that 
backup data of the entire internal HDD is created before 

55 the digital content is moved, and the backup data is re- 
corded onto the internal HDD afterthe digital content is 
moved to a DVD -RAM or the like. If judging that such 
an operation has been performed, the device prohibits 
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the digital content recorded on the internal HDD from 
being used. In this way, unauthorized use of digital con- 
tent can be blocked. 

[0013] Also, the digital content management device 
of the present invention may further Include: a manage- 
ment information encrypting unit operable to encrypt the 
first management information, before the first storing 
unit stores the first management Information; and a 
management information decrypting unit operable to 
decrypt the first management information, before the 
management information judging unit compares the first 
management information with the second management 
information. Therefore, management information for 
digital content is not likely to be tampered, thereby fur- 
ther blocking unauthorized copying of the digital con- 
tent. 

[0014] Alternatively, the digital content management 
device of the present invention may further Include: a 
first encoding unit operable to encode the first manage- 
ment information, before the first storing unit stores the 
first management information; and a second encoding 
unit operable to encode the second management Infor- 
mation, before the management information judging unit 
compares the first management information with the 
second management information. Therefore, manage- 
ment information for digital content is not likely to be 
tampered, thereby further blocking unauthorized copy- 
ing of the digital content. 

[0015] Also, the digital content management device 
of the present invention may further include: a first en- 
coding unit operable to encode the first management in- 
formation, before the management Information judging 
unit compares the first management information with the 
second management information; and a second encod- 
ing unit operable to encode the second management in- 
formation, before the second storing unit stores the sec- 
ond management information. In addition to the above 
effect, therefore, an amount of data to be stored in the 
second storing unit can be reduced. This construction 
is accordingly effective when a semiconductor memory 
or the like that has a smaller storage capacity than an 
HDD or the like is used as the second storing unit. 
[0016] Also, the digital content management device 
of the present invention may further include: a location 
obtaining unit operable to obtain use-point location in- 
formation showing a location of a use-point at which the 
digital content is used; an end-location storing unit op- 
erable to store end-point location Information showing 
a location of an end-point at which the digital content is 
ended to be used; a location judging unit operable to 
judge whether the digital content is permitted to be used 
or not, by comparing the end-point location information 
stored in the end-location storing unit with the use-point 
location Information obtained by the location obtaining 
unit; and a final judging unit operable to judge that the 
digital content is permitted to be used, only when judg- 
ment results by the management information judging 
unit and the location Judging unit are both affirmative. 
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This construction can ensure that parts of the digital con- 
tent that have already been moved are recorded. 
[0017] Accordingly, when digital content with CCI 
showing "Copy No More" is moved from one recording 
5 medium to another, parts of the digital content that have 
yet to be moved are not nullified even if the moving of 
the digital content is interrupted. Therefore, user con- 
venience can be Improved, without deviating from the 
DTCP's main purpose of prohibiting unauthorized cop- 
fa ying. 

[0018] Also, when the present invention is applied to 
an HDD recorder that records digital content onto its in- 
ternal HDD, the first storing unit may be responsible for 
storing data into the internal HDD, and the second stor- 
es ing unit may be responsible for storing data Into a non- 
volatile memory. By storing information about the loca- 
tion of the use-point or the location of the end-point Into 
the Internal HDD, the number of times data is written to 
the nonvolatile memory can be reduced to the minimum. 
20 Also, this construction can ensure that information about 
the location of the use-point at which the digital content 
is used Is constantly stored. 

[0019] Also, even though the moving of the digital 
content is interrupted due to an accident such as a 

25 breakage of a power supply, the moving can be resumed 
from the interrupted location. Further, data tampering at 
the location of the use-point can be detected, and so 
user convenience can be improved while unauthorized 
copying is being blocked. 

30 [0020] Also, in the digital content management device 
of the present invention, the end-location storing unit 
may store the end-point location Information into the first 
storing unit. Therefore, when the second storing unit is 
such a recording device having a limit in the number of 

35 times data can be written thereto, the number of times 
data is written to the second storing unit can be reduced. 
[0021 ] Also, in the digital content management device 
of the present invention, the end-location storing unit 
may encrypt the end-point location information and 

40 store the encrypted end-point location information. 
Therefore, when the first storing unit has a chance of 
unauthorized reading of its stored data, like when the 
first storing unit is an HDD, decoding of the read data at 
the location of the use-point is difficult. Accordingly, un- 

45 authorized use of the digital content can be blocked. 
[0022] To store information about the location of the 
use-point at which the digital content is used, In the dig- 
ital content management device of the present inven- 
tion, the digital content may be made up of one or more 

50 data parts, and the use-point location information may 
be expressed by sequence Information that is given to 
one of the one or more data parts, the one or more data 
parts each being given sequence information showing 
a sequence from a start of the digital content. 

55 [0023] Also, the digital content management device 
of the present invention may further include a random- 
number generating unit operable to generate a random 
number and Include the random number as one item of 
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each of the first management Information and the sec- 
ond management Information. In this case, It Is more dif- 
ficult for an unauthorized user of the digital content to 
tamper management Information for the digital content 
as compared with the case where management infor- 
mation for the digital content simply shows the number 
of times the digital content is Lsed. Therefore, unauthor- 
ized use of digital content can be blocked further. 
[0024] Also, the digital content management device 
of the present invention may further include an identifi- 
cation information obtaining unit operable to obtain iden- 
tification information for identifying the digital content, 
wherein the first management information and the sec- 
ond management Information each Include the identifi- 
cation information. Therefore, whether such an opera- 
tion is performed or not to rewrite digital content record- 
ed on an Internal HDD of a digital TV can be detected. 
Accordingly, unauthorized use of the rewritten digital 
content can be blocked. 

[0025] Also, the digital content management device 
of the present invention may further include a hash-val- 
ue comparing unit operable to compare a hash-value for 
the digital content read from the first storing unit with a 
hash-value included in the second management infor- 
mation read from the second storing unit, to judge 
whether the digital content is permitted to be used or 
not, wherein the identification Information Includes a 
hash-value for the digital content. Therefore, whether 
the digital content has been rewritten or not can be de- 
tected. This construction can further ensure that unau- 
thorized use of the digital content is detected and 
blocked. 

[0026] Also, in the digital content management device 
of thepresent invention, thefirst storing unit may encrypt 
the digital content using an encryption key before storing 
the digital content, and the Identification information 
may include the encryption key, the digital content man- 
agement device may further include an encryption key 
comparing unit operable to compare the encryption key 
included in the identification information read from the 
first storing unit with the encryption key Included In the 
Identification Information read from the second storing 
unit, to judge whether the digital content is permitted to 
be used or not. Therefore, the data size of identification 
information for the digital content can be reduced, and 
so a storage capacity required to manage the digital 
content In the first storing unit and the second storing 
unit can be reduced. Due to this, the cost can be cut. 
[0027] Also, in the digital content management device 
of the present invention, the second storing unit may be 
a nonvolatile memory. Therefore, the management In- 
formation for digital content stored In the second storing 
unit is more difficult to be read or tampered as compared 
with the case where the management information is 
stored in a recording medium such as an internal HDD, 
thereby further blocking unauthorized use of the digital 
content. 

[0028] Also, the digital content management program 



of the present invention may be a digital content man- 
agement program, Including: a first storing step of stor- 
ing digital content and first management information for 
the digital content; a second storing step of storing sec- 

5 ond management information for the digital content; a 
management information updating step of updating the 
first management information stored in the first storing 
step and the second management information stored in 
the second storing step, when the digital content is used; 

10 and a management Information Judging step of Judging 
whether the digital content Is permitted to be used or 
not, by comparing the first management Information 
stored in the first storing step with the second manage- 
ment Information stored In the second storing step. 

*3 Therefore, unauthorized use of digital content can be 
blocked in the same manner as that for the digital con- 
tent management device. 

[0029] Also, the digital content management program 
of the present invention may further include: a manage- 

20 ment information encrypting step of encrypting the first 
management information to be stored in the first storing 
step; and a management information decrypting step of 
decrypting the first management information stored In 
the first storing step. Alternatively, the digital content 

25 management program of the present invention may fur- 
ther include: a first encoding step of encoding the first 
management Information to be stored in the first storing 
step; and a second encoding step of encoding the sec- 
ond management information stored in the second stor- 

50 |ng step. Therefore, it is difficult to tamper management 
information for digital content, and so unauthorized cop- 
ying of the digital content can be blocked. 
[0030] Also, the digital content management program 
of the present Invention may further include: a first en- 

35 coding step of encoding the first management informa- 
tion stored in the first storing step; and a second encod- 
ing step of encoding the second management informa- 
tion to be stored in the second storing step. Therefore, 
it is difficult to tamper management information for dig- 

40 ital content, and so unauthorized copying of the digital 
content can be blocked. 

[0031 ] Also, the digital content management program 
of the present invention may further include: a location 
obtaining step of obtaining use-point location informa- 
43 tion showing a location of a use-point at which the digital 
content is used; an end-location storing step of storing 
end-point location Information showing a location of an 
end-point at which the digital content Is ended to be 
used; a location judg ng step of judging whether the dig- 
so ital content is permitted to be used or not, by comparing 
the end-point location Information stored In the end-lo- 
cation storing step with the use-point location informa- 
tion obtained by the location obtaining step; and a final 
judging step of judging that the digital content is permit- 
55 ted to be used, only when judgment results in the man- 
agement information judging step and the location judg- 
ing step are both affirmative. Therefore, a oamage of 
digital content can be prevented from arising from an 
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interruption of the moving process of the digital content 
due to an accident such as a breakage of a power sup- 
ply, thereby Improving user convenience. 
[0032] In the digital content management program of 
the present Invention, the end-point location information 
may be encrypted and stored in the end-location storing 
step. Therefore, unauthorized use of digital content by 
unauthorized reading of information about a location of 
an end-point and tampering data at the location of the 
end- point can be blocked. 

[0033] In the digital content management program of 
the present Invention, the digital content may be made 
up of one or more data parts, and the use-point location 
information may be expressed by sequence information 
that is given to one of the one or more data parts, the 
one or more data parts each being given sequence in- 
formation showing a sequence from a start of the digital 
content. Therefore, as described above, user conven- 
ience can be improved, without deviating from the 
DTCP's main purpose of prohibiting unauthorized cop- 
ying. 

[0034] Also, the digital content management program 
of the present Invention may further include a random- 
number generating step of generating a random number 
and including the random number as one item of each 
of the first management information and the second 
management information. Therefore, unauthorized use 
of digital content can be blocked. 
[0035] Also, the digital content management program 
of the present invention may further include an identifi- 
cation information obtaining step of obtaining identifica- 
tion Information for identifying the digital content, where- 
in the first management information and the second 
management Information each include the Identification 
information. Therefore, unauthorized use of digital con- 
tent can be blocked. 

[0036] To detect whether the digital content has been 
rewritten or not, the digital content management pro- 
gram of the present invention may further include a 
hash-value comparing step of comparing a hash-value 
for the digital content stored in the first storing step with 
a hash-value Included In the second management Infor- 
mation stored in the second storing step, to judge wheth- 
er the digital content is permitted to be used or not, 
wherein the identification information includes a hash- 
value for the digital content. This can further ensure that 
the above unauthorized use can be detected and 
blocked. 

[0037] Also, in the digital content management pro- 
gram of the present invention, in the first storing step 
the digital content may be encrypted using an encryption 
key before the digital content is stored, and the identifi- 
cation information may include the encryption key, the 
digital content management program further including 
an encryption key comparing step of comparing the en- 
cryption key included in the identification information 
stored in the first storing step with the encryption key 
included in the identification information stored in the 
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second storing step, to judge whether the digital content 
Is permitted to be used or not. Therefore, unauthorized 
use of digital content can be blocked. 

5 BRIEF DESCRIPTION OF THE DRAWINGS 

[0038] These and other objects, advantages and fea- 
tures of the Invention will become apparent from the fol- 
lowing description thereof taken in conjunction with the 
10 accompanying drawings that illustrate a specific embod- 
iment of the invention. 
[0039] In the drawings: 

FIG. 1 is a functional block diagram showing a sche- 
*5 matic construction of a digital TV according to an 
embodiment of the present invention; 
FIG. 2 Is afunctional block diagram showing a sche- 
matic construction of a datamanaglng unit 105 In- 
cluded in the digital TV 1; 
20 FIG. 3 is a flowchart showing a main routine of 
processing executed by the data managing unit 
105; 

FIG. 4 Is a flowchart showing a processing flow of 
a recording process executed by the data managing 
25 unit 105; 

FIG. 5 is a flowchart showing a processing flow of 
a reproducing process executed by the data man- 
aging unit 105; 

FIG. 6 is a flowchart showing a processing flow of 
30 a moving process executed by the data managing 
unit 105; and 

FIG. 7 is afunctional block diagram showing a sche- 
matic construction of a set top box according to 
modification (8). 

35 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

[0040] The following describes a preferred embodi- 
ment of a digital content management device of the 

40 present invention, taking a BS digital television set 
(hereafter simply, a "digital TV") as example, with refer- 
ence to the drawings. A digital TV according to the 
present embodiment receives digital content transmit- 
ted by digital broadcasting, and accumulates the digital 

45 content in an internal HDD. The digital TV is a device 
for displaying video of the digital content on a monitor, 
transferring the digital content to another recording me- 
dium, and the like, while protecting the digital content. 

so (Overall Construction) 

[0041] FIG. 1 is a functional block diagram showing 
the overall construction of the digital TV according to the 
present embodiment. As shown in FIG. 1 , the digital TV 
55 1 includes atuner unit 1 02, a monitor unit 1 06, and other 
units. A BS digital antenna 3 for receiving radio waves 
of BS digital broadcasting is connected to the digital TV 
1. Also, a DVD recorder 4 for recording received digital 
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content onto a DVD Is connected to the digital TV 1 via 
the IEEE1394 Interface. 

[0042] "he digital TV 1 receives a BS digital broadcast 
transmitted from a broadcast satellite 2 via the BS digital 
antenna 3 that is in a dish-shape. In detail, the tuner unit 
1 02 receives a broadcast slgnai transmitted by BS dig- 
ital broadcasting, and demodulates the broadcast sig- 
nal, to generate a transport stream. The tuner unit 102 
deletes, out of transport stream packets (hereafter, 'TS 
packets') included in the generated transport stream, 
TS packets other than those corresponding to a channel 
designated by a command processing unit 1 03. 
[0043] Among the TS packets corresponding to the 
channel designated by the command processing unit 
103, some TS packets may have been scrambled for 
the purpose of prohibiting a user who Is not a contractor 
from viewing them. The tuner unit 102 refers to control 
Information Included In the transport stream, and re- 
quests a card reader/writer (R/W) unit 1 01 to send a de- 
cryption key that can be used to descramblethe scram- 
bled TS packets. 

[0044] The card R/W unit 101 refers to a so-called 
CAS (Conditional Access System) card, to read the de- 
cryption key requested by the tuner unit 1 02, and returns 
the decryption key to the tuner unit 1 02. When not find- 
ing the requested decryption key in the CAS card, the 
card R/W unit 1 01 sends a message Indicating that the 
decryption key is not included in the CAS card, to the 
tuner unit 102. When receiving the decryption key re- 
turned from the card R/W unit 101, the tuner unit 102 
descrambles the scrambled TS packets using the de- 
cryption key, to construct an MPEG transport stream. 
Then, the tuner unit 102 outputs the MPEG transport 
stream to one or both of an encryption processing unit 
1 08 and an MPEG decoder 1 07 according to an instruc- 
tion sent from the command processing unit 103. 
[0045] When receiving the message indicating that 
the decryption key is not included in the CAS card from 
the card R/W unit 101, the tuner unit 102 deletes the 
scrambled TS packets without executing processing for 
descramb ling the TS packets. The tuner unit 1 02 directiy 
uses TS packets that have not been scrambled, to con- 
struct an MPEG transport stream without inquiring the 
card R/W unit 101, and outputs the MPEG transport 
stream to one or both of the encryption processing unit 
1 08 and the MPEG decoder 1 07 according to an Instruc- 
tion sent from the command processing unit 103. 
[0046] Here, the command processing unit 103 may 
designate different channels as a channel of TS packets 
to be outputted to the encryption processing unit 108 
and a channel of TS packets to be outputted to the 
MPEG decoder 1 07. In this case, the tuner unit 1 02 fol- 
lows this instruction to output to the encryption process- 
ing unit 108, an MPEG transport stream relating to the 
channel designated for the encryption processing unit 
108, and output to the MPEG decoder 107, an MPEG 
transport stream relating to the channel designated for 
the MPEG decoder 1 07. This enables a so-called coun- 
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terprogram to be recorded onto the internal HDD 104. 
[0047] The command processing unit 1 03 receives a 
command from a remote controller or a control pane' 
(both not shown), and sends an instruction according to 
5 the command, to the tuner unit 102, the encryption 
processing unit 1 08, or the data managing unit 1 05. To 
be more specific, the command processing unit 103 
designates a reception channel to the tuner unit 102. 
Along with the reception channel, the command 
to processing unit 1 03 also designates, as an output des- 
ignation of an MPEG transport stream relating to this 
channel, one or both of the encryption processing unit 
108 and the MPEG decoder 107. 
[0048] Also, the command processing unit 103 in- 
f 5 structs the encryption processing unit 1 08 to read digital 
content from the Internal HDD 104. Here, the command 
processing unit 103 sends identification Information for 
the digital content and Information about a location of a 
start-point at which the digital content is started to be 
read (hereafter referred to as an "offset value") to the 
encryption processing unit 108. Along with this Instruc- 
tion, the command processing unit 103 designates, to 
the encryption processing unit 108, one or both of the 
MPEG decoder 107 and the output processing unit 109 
as an output destination of an MPEG transport stream 
relating to the digital content to be read. It should be 
noted here that in the present embodiment an "offset 
value" is a number sequentially given, from the first TS 
packet of the digital content, to each of TS packets con- 
stituting the digital content. 

[0049] The command processing unit 103 executes 
three processes in relation to the data managing unit 
105. The first process is to send a notification that the 
digital content Is to be recorded onto the internal HDD 
104. To be more specific, the command processing unit 
103 sends to the data managing unit 105, a notification 
that an MPEG transport stream sent from the tuner unit 
102 is to be recorded onto the internal HDD via the en- 
cryption processing unit 108. Here, the command 
processing unit 103 sends Identification information for 
the digital content to the data managing unit 105. The 
Identification information may be obtained by the com- 
mand processing unit 103 via the remote controller or 
the control panel. 

[0050] The second process is to send an instruction 
to read digital content recorded on the internal HDD 1 04. 
To be more specific, the command processing unit 1 03 
sends identification Information for the digital content 
and an offset value to the data managing unit 1 05, and 
inquires the data managing unit 105 as to whether the 
digital content is permitted to be read from the internal 
HDD 104 or not. When receiving an affirmative re- 
sponse to this inquiry from the data managing unit 105, 
the command processing unit 103 instructs the encryp- 
tion processing unit 1 08 to read the digital content from 
the internal HDD 104, decrypt the read digital content, 
and output the decrypted digital content to the output 
processing unit 109. Here, the command processing 
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unit 1 03 sends the identification Information to the en- 
cryption processing unit 1 08. 

[0051] When CCI attached to digital content relating 
the MPEG transport stream received from the tuner unit 
102 shows "Copy One Generation 3 , the encryption 
processing unit 1 08 changes the CCI to show "Copy No 
More". Then, the encryption processing unit 108 en- 
crypts the digital content and records the encrypted dig- 
ital content onto the internal HDD 104. The encryption 
processing unit 108 does not record digital content to 
which CCI showing "Copy No More" is attached, onto 
the internal HDD 104. 

[0052] When receiving the instruction from the com- 
mand processing unit 103 to read digital content from 
the internal HDD 104 along with the identification infor- 
mation fo?- the digital content and the offset value, the 
encryption processing unit 108 reads the digital content 
from the Internal HDD 1 04, and decrypts the read digital 
content, to generate an MPEG transport stream. Then, 
the encryption processing unit 1 08 outputs the generat- 
ed MPEG transport stream to one or both of the MPEG 
decoder 107 and the output processing unit 109, ac- 
cording to an Instruction sent from the command 
processing unit 103. 

[0053] The internal HDD 104 is accessed by the en- 
cryption processing unit 108 or the data managing unit 
105, to record or read digital content or the like. Also, 
the MPEG decoder 107 decrypts the MPEG transport 
stream received from the tunerunit102,to generate vid- 
eo and audio signals, and outputs the generated video 
and audio signals to the monitor unit 1 06. The monitor 
unit 106 receives the video and audio signals from the 
MPEG decoder 107, and outputs video from itself, and 
outputs audio from an attached speaker. 
[0054] When recording digital content onto the inter- 
nal HDD 104, the data managing unit 105 also records 
management information for the digital content onto a 
nonvolatile memory 110. When the data managing unit 
105 reads the digital data from the internal HDD 104, 
the data managing unit 105 verifies the authenticity of 
the digital content recorded on the internal HDD 1 04 by 
referring to the management Information recorded on 
the nonvolatile memory 110. The data managing unit 
1 05 receives identification information for digital content 
from the command processing unit 103, and records 
management information (described later) for managing 
the digital content Identified by the Identification infor- 
mation, onto each of the internal HDD 104 and the non- 
volatile memory 11 0. 

[0055] Apart from this, upon receipt of an inquiry from 
the command processing unit 1 03 as to whether prede- 
termined digital content is permitted to be read from the 
internal HDD 104 or not, the data managing unit 105 
reads management information for the digital content 
from each of the internal HDD 104 and the nonvolatile 
memory 110, and compares the management informa- 
tion read from the internal HDD 104 with the manage- 
ment information read from the nonvolatile memory 110 
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to determine if they match Then, the data managing unit 
1 05 Judges whether the digital content Is permitted to be 
read or not based on the matching result, and sends the 
judgment result to the command processing unit 103. 

5 [0056] Upon receipt of the MPEG transport stream 
from the encryption processing unit 108, the output 
processing unit 109 transmits the MPEG transport 
stream to the DVD recorder 4 according to the proce- 
dure defined by the DTCP specification, the IEEE1394 

10 standard, or the like. 

(Construction of the Data Managing Unit 105) 

[0057] The following describes the data managing 
T5 unit 105 in further detail. FIG. 2 is a functional block di- 
agram showing the construction of the data managing 
unit 105. As shown In FIG. 2, the data managing unit 
105 is composed of an offset-value receiving unit 1 05a, 
an identification-information receiving unit 105b, acom- 
20 mand receiving unit 105c, and other functional blocks. 
The offset-value receiving unit 105a is a functional block 
for receiving from the command processing unit 1 03 an 
offset value that is used to read digital content recorded 
on the internal HDD 104. 
25 [0058] The identification- information receiving unit 
105b receives identification information for identifying 
the digital content from the command processing unit 
103. The command receiving unit 105c receives a com- 
mand showing a type of required processing, I.e., a corn- 
so mand showing one of a recording process, a reproduc- 
ing process, and a moving process, from the command 
processing unit 103. A controlling unit 105d assigns 
processing to a recording unit 105f, a judging unit 1 05g, 
and the like, according to a command received by the 
35 command receiving unit 105c. Also, the controlling unit 
1 05d sends a judgment result sent from the judging unit 
105g to the command processing unit 103, and requests 
the recording unit 1 05f to execute processing according 
to the judgment result. 
40 [0059] Upon receipt of identification information for 
digital content and an offset value from the controlling 
unit 1 05d, the recording unit 1 05f sends a request for a 
random number to a random-number generating unit 
1 05e, and obtains the random numberfrom the random- 
45 number generating unit 105e. Then, the recording unit 
1 05f records the identification Information, the offset val- 
ue, and the random number onto the nonvolatile mem- 
ory 110. Also, the recording unit 105f passes the Iden- 
tification information, the offset value, and the random 
so number, to an encrypting unit 105h, and requests the 
encrypting unit 105h to record the Identification informa- 
tion, the offset value, and the random number onto the 
internal HDD 1 04. Upon receipt of the request from the 
recording unit 105f, the encrypting unit 105h encrypts 
55 the identification information, the offset value, and the 
random number, and records the encrypted identifica- 
tion information, the encrypted offset value, and the en- 
crypted random number onto the Internal HDD 104. 
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[0060] Upon receipt of the identification information 
and the offset value Iron the controlling unit 105d, the 
Judging unit 105g passes the identification information 
to an obtaining unit 1 05J, and requests the obtaining unit 
105j to read a random number corresponding to the 
identification Information from each of the Internal HDD 
104 and the nonvolatile memory 110, Upon receipt of 
the random number read from the Internal HDD 1 04 and 
the random numbe r read from the nonvolatile memory 
110 from the obtaining unit 105J, the judging unit 105g 
compares these random numbers to determine if they 
match. Also, the Judging unit 1 05g compares the offset 
value received from the controlling unit 105d and the off- 
set value read from the Internal HDD 104, to determine 
if the offset value received from the controlling unit 1 05d 
Is equal to or smaller than the offset value received from 
the controlling unit 105d or not. 
[0061] When judging that the random numbers 
match, and that the offset value read from the internal 
HDD 104 Is equal to or smaller than the offset value re- 
ceived from the controlling unit 105d, the judging unit 
105g sends the Judgment result being that the digital 
content is permitted to be read, to the controlling unit 
105d. In the other cases, the judging unit 1 05g sends 
the judgment result being that the digital content is not 
permitted to be read, to the controlling unit 105d. 
[0062] Upon receipt of the identification Information 
and the offset value from the judging unit 1 05g, the ob- 
taining unit 1 05 j requests the decrypting unit 1 05 1 to read 
an offset value and a random number corresponding to 
the identification information and the like, from the inter- 
nal HDD 1 04. Then, upon receipt of the offset value and 
the random number from the decrypting unit 1051, the 
obtaining unit 105) passes the offset value and the ran- 
dom number to the judging unit 105g. Also, along with 
this processing, the obtaining unit 105j reads a random 
number corresponding to the identification information 
and the like from the nonvolatile memory 110, and pass- 
es the read random number, too, to the judging unit 
105g. 

[0063] The random-number generating unit 105e 
generates a random number according to a well-known 
algorithm as requested by the recording unit 105f, and 
passes the generated random number to the recording 
unit 105f. Also, the encrypting unit105h and the decrypt- 
ing unit 1 05I respectively execute encryption processing 
and decryption processing according to a well-known al- 
gorithm. 

(Processing of the Data Managing Unit 105) 

[0064] The following describes the processing of the 
data managing unit 1 05, with reference to the drawings. 
As described above, the data managing unit 105 exe- 
cutes one of three processes according to a request 
sent from the command processing unit 1 03. The three 
processes are a recording process, a reproducing proc- 
ess, and a moving process. FIG. 3 Is a flowchart show- 
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ing a main routine of the processing executed by the 
data managing unit 105. As shown In FIG. 3, the data 
managing unit 1 05 receives, using the command receiv- 
ing unit 105c, a command sent from the command 
5 processing unit 1 03 (step S1 ). The command receiving 
unit 1 05c passes the received command to the control- 
ling unit 105d. 

[0065] Uoon receipt of the command from the com- 
mand receiving unit 105c, the controlling unit 105d de- 

10 term in es a process to be executed next by referring to 
the command. To be more specific, when the received 
command Is a "record" command (step S2: Yes), the 
controlling unit 105d determines that a recording proc- 
ess is to be executed next (step S3). When the received 

15 command Is not a "record" command (step S2: No), but 
a "reproduce" command (step S4: Yes), the controlling 
unit 105d determines that a reproducing process is to 
be executed next (step S5). 

[0066] When the received command is not a "repro- 
ve duce" command (step S4: No), but a "move" command 
(step S6: Yes), the controlling unit 1 05d determines that 
a moving process Is to be executed next (step S7). After 
completing the processing in steps S3, S5, and S7, or 
when the received command is not a "record" command, 
25 a "reproduce" command, nor a "move" command (step 
S6: No), the controlling unlt105d returns to step S1, and 
repeats the processing. 

[0067] The followingdescribesinfurtherdetail, the re- 
cording process, the reproducing process, and the mov- 
30 ing process that are executed by the data managing unit 
105. 

(1 ) Recording Process 

35 [0068] FIG. 4 Is a flowchart showing a processing flow 
of the recording process that is executed by the data 
managing unit 105. As shown in FIG. 4, the data man- 
aging unit 1 05 receives, using the Identification -informa- 
tion receiving unit 105b, ident f ication information sent 

40 from thecommand processing unit 1 03 (step S301 ).The 
identification information is provided for associating dig- 
ital content to be recorded onto the Internal HDD 104 
with a random number that is described later. The con- 
trolling unit 105d receives the identification information 

45 from the identification -information receiving unit 105b, 
and passes the identification Information to the record- 
ing unit 1051, and at the same time, passes an offset 
value being set at zero, to the recording unit 1 05f. 
[0069] Upon receipt of the identification information 

50 and the offset value from the controlling unit 1 05d, the 
recording unit 105f requests the random-number gen- 
erating unit 105e to generate a random number. The 
random-number generating unit 105e generates a ran- 
dom number as requested by the recording unit 105f 

55 (step S302). Then, the random-number generating unit 
105e passes the generated random number to the re- 
cording unit 105f. 

[0070] Upon receipt of the random number from the 
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random-number generating unit 1 05e, the recording unit 
105f writes the random number, and the Identification 
Information received from the controlling unit 105d, to 
the nonvolatile memory 110 (step S303). Also, the re- 
cording unit 105f passes the identification information, 
the random number, and the offset value to the encrypt- 
ing unit 105h, and requests the encrypting unit 105h to 
record them onto the Internal HDD 104. The encrypting 
unit 105h en crypts the identification Information, the ran- 
dom number, and the offset value received from the re- 
cording unit 105f (step S304) Then, the encrypting unit 
1 05 h writes the encrypted identification Information, the 
encrypted random number, and the encrypted offsetval- 
ue to the internal HDD 1 04 (step S305). 

(2) Reproducing Process 

[0071 ] FIG. 5 Is a flowchart showing a processing flow 
of the reproducing process that is executed by the data 
managing unit 105. As shown in FIG. 5, the data man- 
aging unit 1 05 receives, using the identification-informa- 
tion receiving unit 105b, Identification Information from 
the command processing unit 1 03 (step S501 ). Further, 
the data managing unit 105 receives, using the offset- 
value receiving unit 1 05a. an offset value from the com- 
mand processing unit 103 (step S502). 
[0072] Upon receipt of the Identification Information 
from the identification-information receiving unit 105b 
and the offset value from the off set- value receiving unit 
105a, the controlling unit 105d passes the identification 
information and the offset value to the judging unit 1 05g. 
Then, the controlling unit 105d requests the Judging unit 
105g to judge whether digital content identified by the 
identification information is permitted to be read from the 
internal HDD 104 or not. 

[0073] Upon receipt of the request from the controlling 
unit 1 05d, the judging unit 1 05g passes the identification 
information received from the controlling unit 1 05d to the 
obtaining unit 105J. Then, the judging unit 1 05g requests 
the obtaining unit 105] to read a random number corre- 
sponding to the Identification information from the non- 
volatile memory 110 and to read a random number and 
an offset value corresponding to the identification infor- 
mation from the internal HDD 1 04. 
[0074] Upon receipt of the request from the judging 
unit 105g, the obtaining unit 105J searches the nonvol- 
atile memory 110, for Identification Information that 
matches the Identification Information received from the 
judging unit 105g. When the search result shows that 
such identification Information is recorded on the non- 
volatile memory 110 (step S503), the Judging unit 105g 
reads a random number corresponding to the identifica- 
tion information from the nonvolatile memory 110 (step 
S504). 

[0075] Further, the obtaining unit 105j passes the 
identification information received from the judging unit 
105g to the decrypting unit 1051, and requests the de- 
crypting unit 1 05i to read a random number and an offset 



value corresponding to the identification information 
from the Internal HDD 104, and to decrypt the random 
number and the offset value. Upon receipt of the request 
from the obtaining unit 105j, the decrypting unit 105: 
5 searches the internal HDD 1 04, and reads the random 
number and the offset value corresponding to the iden- 
tification information received from the obtaining unit 
105] (step S505). 

[0076] Then, the decrypting unit 1051 decrypts the 
10 read random number and the read offset value, and 
passes the decrypted random number and the decrypt- 
ed offset value to the obtaining unit 105J (step S506). 
The obtaining unit 105j receives the random number 
and the offset value from the decrypting unit 1051, and 
is passes the received data along with the random number 
read from the nonvolatile memory 110, to the Judging 
unit 105g. 

[0077] When receiving from the obtaining unit 105J the 
random number read from the nonvolatile memory 110 

20 and the random number and the offset value read from 
the internal HDD 104, the judging unit 105g first com- 
pares the random number read from the nonvolatile 
memory 110 with the random number read from the In- 
ternal HDD 1 04. When the comparison result shows that 

25 the random number read from the nonvolatile memory 
110 and the random number read from the internal HDD 
1 04 match (step S507: Yes), the judging unit 1 05g com- 
pares the offset value received from the controlling unit 
105d with the offset value received from the obtaining 

30 unit105g. 

[0078] When the comparison result shows that the off- 
set value received from the controlling unit 1 05 d Is equa! 
to or smaller than the offset value received from the ob- 
taining unit 105g (step S508: Yes), the judging unit 1 05g 

35 judges that digital content identified by the identification 
information is permitted to be read from the internal HDD 
104 (step S509). When the judgment result in any of 
steps S503, S507, and S508 is "No u , the judging unit 
105g judges that the digital content identified by the 

40 identification information is not permitted to be read from 
the internal HDD 104 (step S511). 
[0079] Then, the Judging unit 1 05g passes the judg- 
ment result to the controlling unit 105d. Upon receipt of 
the judgment result from the judging unit 1 05g, the con- 

<5 trolling unit 105d sends the above Judgment result to the 
command processing unit 103, and ends the reproduc- 
ing process (step S51 0). 

(3) Moving Process 

so 

[0080] FIG. 6 is a flowchart showing a processing flow 
of the moving process that Is executed by the data man- 
aglng unit 1 05. As shown in FIG. 6, the data managing 
unit 1 05 receives, using the Identification -information re- 
55 ceiving unit 105b, identification information sent from 
the command processing unit 103 (step S701). Further, 
the data managing unit 105 receives, using the offset- 
value receiving unit 1 05a, an offset value sent from the 
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command processing unit 103 (step S702). 
[0081] Upon receipt of the Identification Information 
from the Identiflcaton-information receiving unit 105b 
and the offset value from the offset-value receiving unit 
105a, the controlling unit 105d passes the received 
Identification information and the received offset value 
to the judging unit 105g. Then, the controlling unit 105d 
requests the judging unit 1 05g to judge whether digital 
content identified by the Identification information is per- 
mitted to be read from the HDD 1 04 or not. 
[0082] Upon receipt of the request from the controlling 
unit 1 05d, the judging unit 1 05g passes the identification 
information received from the controlling unit 1 05d to the 
obtaining unit 1 05j. Then, the judging unit 1 05g requests 
the obtaining unit 105j to read a random number corre- 
sponding to the identification information from the non- 
volatile memory 110, and to read a random number and 
an offset value corresponding to the Identification Infor- 
mation from the internal HDD 104. 
[0083] Upon receipt of the request from the judging 
unit 105g, the obtaining unit 105j searches the nonvol- 
atile memory 110, for Identification Information that 
matches the identification Information received from the 
judging unit 105g. When the search result shows that 
such identification information is recorded on the non- 
volatile memory 110 (step S703: Yes), the judging unit 
105g reads a random number corresponding to the 
identification information from the nonvolatile memory 
110 (step S704). 

[0084] Further, the obtaining unit 105J passes the 
identification Information received from the judging unit 
105g to the decrypting unit 1051, and requests the de- 
crypting unit 1 05i to read a random number and an offset 
value corresponding to the identification information 
from the internal HDD 104 and to decrypt the random 
number and the offset value (step S705). Upon receipt 
of the request from the obtaining unit 1 05j, the decrypt- 
ing unit 1 05I searches the Internal HDD 1 04, for a ran- 
dom number and an offset value corresponding to the 
Identification information received from the obtaining 
unit 1 05j, and reads from the internal HDD 1 04 the ran- 
dom number and the offset value corresponding to the 
identification information received from the obtaining 
unit 105j (step S706). 

[0085] Then, the decrypting unit 1051 decrypts the 
read random number and the read offset value, and 
passes the decrypted random number and the decrypt- 
ed offset value to the obtaining unit 105J. Upon receipt 
of the random number and the offset value from the de- 
crypting unit 105i, the obtaining unit 1 05j passes the re- 
ceived data along with the random number read from 
the nonvolatile memory 110, to the judging unit 105g. 
[0086] When receiving from the obtaining unit 1 05j the 
random number read from the nonvolatile memory 110 
and the random number and the offset value read from 
the internal HDD 104, the judging unit 105g first com- 
pares the random number read from the nonvolatile 
memory 110 with the random number read from the in- 
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ternal HDD 1 04. When the comparison result shows that 
the random number read from the nonvolatile memory 
110 and the random number read from the internal HDD 
104 match (step S707: Yes), the judging unit 1 05g com- 
5 pares the offset value received from the controlling unit 
105d with the offset value received from the obtaining 
unit 105g. 

[0087] When the comparison result shows that the off- 
set value received from the controlling unit 1 05d is equa! 

10 to or smaller than the offset value received from the ob- 
taining unit 105g (step S708: Yes), the judging unit 1 05g 
judges that digital content Identified by the Identification 
information is permitted to be read from the internal HDD 
104 (step S711), and sends this judgment result to the 

is controlling unit 1 05d (step S712). 

[0088] When the judgment result in any of steps S703, 
S707, and S708 Is "No", the Judging unit 105g Judges 
that the digital content Identified by the Identification In- 
formation is not permitted to be read from the internal 

20 HDD 104 (step S709), and sends this Judgment result 
to the controlling unit 105d (step S710). 
[0089] When the Judgment result received from the 
Judging unit 105g shows that the digital content is per- 
mitted to be read, the controlling unit 1 05d passes the 

25 offset value and the identification information for the dig- 
ital content to the recording unit 1 05f, and requests the 
recording unit 105f to record them onto each of the In- 
ternal HDD 104 and the nonvolatile memory 110. Upon 
receipt of the identification information and the offset 

30 value from the controlling unit 1 05d, the recording unit 
105f requests the random-number generating unit 1 05e 
to generate a random number. 
[0090] The random-number generating unit 105e 
generates a random number as requested by the re- 

35 cording unit 1 05f (step S71 3), and passes the generated 
random number to the recording unit 1 05f. Upon receipt 
of the random number from the random-number gener- 
ating unit 105e, the recording unit 105f writes the re- 
ceived random number, and the identification Informa- 

40 tion received from the controlling unit 1 05d, to the non- 
volatile memory 110 (step S714). Also, the recording 
unit 105f Increments the offset value received from the 
offset-value receiving unit 1 05a by one (step S715). 
[0091] The recording unit 105f passes the identifica- 

45 tion information, the random number, and the offset val- 
ue to the encrypting unit 105h, and requests the encrypt- 
ing unit 1 05h to record them onto the Internal HDD 1 04. 
The encrypting unit 105h encrypts the Identification In- 
formation, the random number, ana the offset value re- 

50 ceived from the recording unit 1 05f (step S71 6). Then, 
the encrypting unit 1 05h writes the encrypted Identifica- 
tion information, the encrypted random number, and the 
encrypted offset value to the internal HDD 104 (step 
S717). 

55 [0092] Then, upon receipt of the judgment result from 
the judging unit 1G5g, the controlling unit 105d sends 
the Judgment result to the command processing unit 
103. Then, the controlling unit 105d judges whether an 
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instruction to end the moving process has been received 
from the command processing unit 103 or not. When 
judging that such an instruction has not been received 
(step S71 8: No), the controlling un t 1 05d moves to step 
S715, and repeats the processing. Accordingly, infor- 5 
mation about a location of a use-point at which the digital 
content is used is successively and continuously record- 
ed onto the internal HDD 104 in parallel with use of the 
digital content. Upon receipt of an instruction to end the 
moving process (step S718: Yes), the controlling unit io 
1 05d ends the moving process. 
[0093] As described above, according to the digital TV 
according to the present embodiment, when such digital 
content whose CCI shows "Copy No More" is moved 
from the interna) HDD 1 04 to another recording medium t5 
(e.g. a DVD in the present embodiment), parts of the 
digital content that have already been moved are suc- 
cessively recorded onto the DVD recorder 4. According 
to this construction, user convenience in moving digital 
content can be improved while preventing a copy of dig- 20 
ital content from being generated due to the same digital 
content being present In each of the internal HDD 104 
and the recording medium. 

[0094] As described above, before the digital content 
is read from the internal HDD 1 04, the judgment is per- 25 
formed as to whether the digital content is permitted to 
be read or not, by referring to a random number record- 
ed on the nonvolatile memory 110 that is separate from 
the internal HDD 1 04. Therefore, if such an operation Is 
performed as that the Internal HDD 1 04 Is removed and 30 
connected to a personal computer to create backup data 
of the digital content before the digital content Is moved, 
and then the backup data is recorded onto the internal 
HDD 104 after the digital content is moved, a random 
number for the digital content recorded on the Internal 35 
HDD 104 and a random number for the digital content 
recorded on the nonvolatile memory 1 1 0 do not match. 
In this case, the digital content is not permitted to be 
read from the internal HDD 104. Accordingly, the digital 
TV 1 of the present Invention can block unauthorized *o 
copying of digital content. 

(Modifications) 

[0095] Although the present Invention has been de- 45 
scribed based on the preferred embodiment as above, 
It should beclearthat the present Invention is not limited 
to the above embodiment. For example, the following 
modifications are possible. 

50 

(1) Although the above embodiment describes the 
case where an offset value Is a number given to a 
TS packet that constitutes digital content, the 
present invention should not be limited to such. For 
example, instead of numbering each TS packet, a 55 
group of every predetermined number of TS pack- 
ets (e.g., 10 TS packets) may be numbered, and a 
number given to such a group of TS packets may 



be used as an offset value. 

Also, time Information Included In the digital 
content may be referred to, and an offset value may 
be Incremented by one at every predetermined pe- 
riod of time (e.g., 10sec.) from the start of the digital 
content. Further, an offset value may be Increment- 
ed by one at every predetermined amount of data 
(e.g., eight KB) from the start of the digital content, 
it should be noted here that DTCP specifies that 
copies of the same digital content should not exist 
for more than one minute when the digital content 
is moved. Therefore, it is preferable to set the offset 
value in such a manner that the digital content can 
be divided into parts small enough to conform to the 
specification. 

(2) Although the above embodiment describes the 
case where Identification Information for digital con- 
tent is received by the command processing unit 

103 via the remote controller or the control panel, 
the present invention should not be limited to such. 
For example, a name of a file used to record the 
digital content onto the Internal HDD 104, or a hash 
value of the entire digital content may be used as 
the identification information for the digital content. 

Alternatively, instead of using a hash value as 
the identification Information, an encryption key re- 
lating to an encryption process executed when the 
digital content is recorded onto the internal HDD 

1 04 may be used as the identification Information. 
In this case, the encryption key may be recorded 
onto each of the internal HDD 104 and the nonvol- 
atile memory 1 1 0. When digital content Is used, the 
judgment may be performed as to whether the dig- 
ital content is permitted to be used or not by com- 
paring the encryption key recorded on the Internal 
HDD 104 with the encryption key recorded on the 
nonvolatile memory 110. 

(3) The above embodiment describes the case 
where an offset value is recorded onto each of the 
internal HDD 104 and the nonvolatile memory 110 
when digital content is moved. In addition to this, an 
offset value may also be recorded onto each of the 
internal HDD 104 and the nonvolatile memory 110 
in the following cases. Assume that among data 
parts of digital content recorded on the DVD record- 
er 4 data parts that have been there for a predeter- 
mined period of time are deleted, in this case, an 
offset value showing the start of the remaining data 
parts that have not been deleted may be recorded 
onto each of the internal HDD 104 and the nonvol- 
atile memory 1 1 0. Also, assume that digital content 
that Is permitted to be reproduced only once is re- 
produced, in this case, too, an offset value showing 
the start of the remaining data parts of the digital 
content that are yet to be reproduced may be re- 
corded onto each of the internal HDD 104 and the 
nonvolatile memory 110. 

(4) Although the above embodiment describes the 



45 



50 



55 



11 



» 



1 



EP 1 333 674 A2 



21 

case where the digital content received by the dig- 
ital TV ts recorded onto the Internal HDD 104, the 
present Invention should not be limited to such. For 
example, the d gital content may be recorded onto 
recording med a other than an HDD, such as a 5 
memory card, a D-VHS, and a DVD recorder. In th s 
case, the identification information, the offset value, 
and the random number are recorded onto the 
memory card or the like onto which the digital con- 
tent (s recorded, instead of being recorded onto the 10 
internal HDD 104. 

(5) Although the above embodiment describes the 
case where the identification information for the dig- 
ital content and the random number are recorded 
onto the nonvolatile memory 1 1 0, the present inven- t5 
tion should not be limited to such. For example, the 
Identification information and the random number 
may be recorded onto a recording device that re- 
quires authentication for access. Alternatively, the 
identification information and the random number 20 
may be recorded onto an EEPROM or a RAM to 
which power is constantly supplied. In short, the 
identification information and the like may be re- 
corded onto any recording device that does not per- 
mit general users to freely read and write data. 25 

(6) Although the above embodiment describes the 
case where the digital content Is moved from the 
internal HDD 1 04 to the DVD recorder 4, the present 
Invention should not be limited to such. For exam- 
ple, the digital content may instead be moved from so 
the internal HDD 104 to a recording medium other 
than a DVD recorder onto which data can be digit- 
ally recorded, such as a memory card, a D-VHS, 
and an HDD recorder. 

(7) The above embodiment describes the case- 35 
where a random number is encrypted by the en- 
crypting unit 105h when the random number is re- 
corded onto the internal HDD 104, the random 
number is decrypted by the decrypting unit 1 05i 
when the random number is read from the internal «o 
HDD 104, and then the decrypted random number 

Is compared with the random number recorded on 
the nonvolatile memory 110. However, the present 
invention should not be limited to such. The follow- 
ing method may Instead be used. 43 

When the random number is recorded onto the 
Internal HDD 1 04, a value resulting from converting 
the random number using a one-way function may 
be recorded onto the internal HDD 1 04. In this case, 
decryption is not performed when the random so 
number Is read from the internal HDD 1 04. Also, the 
random number may be directly recorded onto the 
nonvolatile memory 110 as It is, and the random 
number may be converted using the one-way func- 
tion when the random number is read. Then, the val- 55 
ue resulting from converting the random number 
read from the internal HDD 104 and the value re- 
sulting from converting the random number read 



from the nonvolatile memory 1 1 0 may be compared, 
to Judge whether digital content relating to the ran- 
dom numbers is permitted to be read or not. 

On the contrary, the value resulting from con- 
verting the random number using a one-way func- 
tion may be recorded onto the nonvolatile memory 
110, and the random number may be direct y re- 
corded onto the Interna! HDD 104 as It Is, and the 
random number in the internal HDD 104 may be 
converted using the same one-way function when 
the random number Is read. By doing so, too, the 
same effect as above can be obtained. This method 
is particularly effective in such a case where a hash - 
value for digital content is used as Identification in- 
formation for the digital content as described later, 
because this method can reduce a data amount of 
Identification Information to be recorded onto the 
nonvolatile memory 1 1 0 whose storage capacity Is 
relatively limited as compared with the internal HDD 
104. 

(8) Although the above embodiment describes the 
case where the present Invention is applied to the 
digital TV 1 , the present Invention should not be lim- 
ited to such. For example, the present Invention can 
be applied to a set top box that is connected to a 
television set for receiving digital broadcasts. FIG. 
7 Is afunctional block diagram showing a schematic 
construction of a set top box to which the present 
invention is applied. 

As shown in FIG. 7, the set top box 7 has sub- 
stantially the same construction as the digital TV 1 
according to the above embodiment of the present 
invention, with a major difference being in that the 
set top box 7 is connected to an ana'ogue high-def- 
inition TV via a component cable, whereas the dig- 
ital TV 1 is internally provided with the monitor unit 
106. 

As the digital TV 1 , the set top box 7 receives, 
using a BS antenna 6, a BS digital broadcast from 
a broadcast satellite 5, demodulates digital content 
using a tuner unit 6, and encrypts, using an encryp- 
tion processing unit 705, the demodulated digital 
content according to a user designation received by 
a command processing unit 704 and records the en- 
crypted digital content onto an internal HDD 709. 
Here, as in the above embedment, Identification in- 
format on and the like are recorded onto each of the 
Internal HDD 709 and a nonvolatile memory 707 In 
the set top box 7. 

The set top box 7 reads digital content from the 
Internal HDD 709 according to a user designation 
received using the command processing unit 704, 
and encrypts the read digital content using the en- 
cryption processing unit 705. Then, the set top box 
7 outputs the decrypted digital content to the ana- 
logue high-definition television set 8, via the IVPEG 
decoder 703. In this case, too, the set top box 7 
compares identification Information and the like for 
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the digital content recorded on the Internal HDD 709 
and identification information and the like recorded 
on the nonvolatile memory 707 as in the above em- 
bodiment, to judge whether the digital content s 
permitted to be read or not. 

As described above, the present invention ap- 
plied to a set top box can also produce the same 
effect as in the above embodiment. To be more spe- 
cific, the present invention applied to the set top box 
can block unauthorized copying of digital content 
due to such an operation as that backup data of the 
digital content recorded on the set top box is creat- 
ed, the digital content is moved from the set top box 
to another recording medium, and then the backup 
data is copied to an HDD internally provided in the 
set top box. 

(9) Although the above embodiment describes the 
case where information about a location of a start- 
point at which digital content is started to be read is 
recorded onto the internal HDD 1 04 as an offset val- 
ue, the present invention should not be limited to 
such. 

In the above embodiment, (a) an offset value Is 
first incremented (step S715), (b) identification in- 
formation, a random number, and an offset value 
are encrypted (step S716), and then, (c) the en- 
crypted Identification Information, the encrypted 
random number, and the encrypted offset value are 
recorded onto the internal HDD 104 (step S717). 
Instead of this procedure, the following procedure 
may be employed. That is, (a 1 ) identification infor- 
mation, a random number, and an offset value are 
first encrypted, (b') the encrypted identification in- 
formation, the encrypted random number, and the 
encrypted offset value are recorded onto the inter- 
nal HDD 104, and then (c') an offset value is incre- 
mented. 

By doing so, information about a location of an 
end-point at which digital content is ended to be 
used Is constantly recorded onto the internal HDD 
104. Therefore, even if a moving process in which 
digital content Is moved from the internal HDD 104 
to another recording medium is interrupted due to 
an accident such as a breakage of a power supply, 
the digital content can be started to be used from 
an unprocessed part when the moving process is 
resumed. This is highly convenient for the user. 

Also, even In the case.of this method, an offset 
value that is required to be rewritten frequently is 
written only to the internal HDD 1 04, and is not writ- 
ten to the nonvolatile memory 110. Therefore, this 
method is particularly effective when the nonvolatile 
memory 1 1 0 has a limit In the number of times data 
can be written thereto, like when the nonvolatile 
memory 110 is a flash memory. 

In this case, if an offset value is encrypted and 
then recorded, a location of an end-point at which 
the d gital content is ended to be used cannot be 



made known easily. This can block such unauthor- 
ized use of digital content as that the internal HDD 
104 is removed and connected to a personal com- 
puter, and data at the location of the end-point is 

s tampered to perform unauthorized copying of the 
digital content. Accordingly, even though informa- 
tion about the location of the end point is not record- 
ed onto the nonvolatile memory 110, unauthorized 
copying made by tampering data at the location of 

10 the end-point can be blocked. 

It should be noted here that an offset value is 
not necessarily given to every TS packet as de- 
scribed in the modification (1 ). For example, in such 
a case where an offset value is given to every ten 

t5 TS packets, the first TS packet, the 11 th TS packet, 
the 21 81 TS packet, and the like can be a location of 
a start-point at which digital content is started to be 
used. In this case, values "0", "10", "20", and the 
like are sequentially recorded as information about 

20 a location of an end-point at which the digital con- 
tent is ended to be used. 

(10) The present Invention may be a program that 
makes a computer execute the above-described 
processes. In this case, the computer can manage 
25 digital content as described above, so as to produce 
the same effect as described above. 

[0096] Although the present Invention has been fully 
described by way of examples with reference to the ac- 

so companying drawings, it is to be noted that various 
changes and modifications will be apparent to those 
skilled In the art. Therefore, unless such changes and 
modifications depart from the scope of the present in- 
vention, they should be construed as being included 

35 therein. 



Claims 

40 1. A digital content management device, comprising: 

a first storing unit operable to store digital con- 
tent and first management information for the 
digital content; 

45 a second storing unit operable to store second 

management information for the digital content; 
a management information Judging unit opera- 
ble to Judge, before the digital content is used, 
whether the digital content is permitted to be 

50 used or not, by comparing the first manage- 

ment information with the second management 
information; and 

a management information updating unit oper- 
able to update the first management informa- 
55 tion and the second management information, 

when a judgment result by the management in- 
formation Is affirmative and the digital content 
is used. 
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2. The digital content management device of Claim 1 , 
further comprising: 

a management Information encrypting unit op- 
erable to encrypt the first management Informa- 
tion, before the first storing unit stores the first 
management information; and 
a management information decrypting unit op- 
erable to decrypt the first management informa- 
tion, before the management Information Judg- 
ing unit compares the first management Infor- 
mation with the second management informa- 
tion. 

3. The digital content management device of Claim 1 , 
further comprising: 

a first encoding unit operable to encode the first 
management information, before the first stor- 
ing unit stores the first management informa- 
tion; and 

a second encoding unit operable to encode the 
second management Information, before the 
management information judging unit com- 
pares the first management information with 
the second management information. 

4. The digital content management device of Claim 1 , 
further comprising: 

afirst encoding unit operable to encode the first 
management information, before the manage- 
ment information judging un it compares thef irst 
management Information with the second man- 
agement Information; and 
a second encoding unit operable to encode the 
second management information, before the 
second storing unit stores the second manage- 
ment information. 

5. The oigital content management device of Claim 1 , 
further comprising: 

a location obtaining unit operable to obtain use- 
point location information showing a location of 
a use-point at which the digital content is used; 
an end-location storing unit operable to store 
end-point location information showing a loca- 
tion of an end-point at which the digital content 
is ended to be used; 

a location judging unit operable to judge wheth- 
er the digital content is permitted to be used or 
not, by comparing the end-point location infor- 
mation stored in the end-location storing unit 
with the use-point location information obtained 
by the location obtaining unit; and 
a final judging unit operable to judge that the 
digital content s permitted to be used, ony 
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when judgment results by the management in- 
formation judging unit and the location Judging 
unit are both affirmative. 

5 6. The digital content management device of Claim 5, 
wherein the end-location storing unit stores 
the end-point location information into the first stor- 
ing unit. 

io 7. The digital content management device of Claim 5, 
wherein the end-location storing unit encrypts 
the end-point location information and stores the 
encrypted end-point location information. 

*3 8. The digital content management device of Claim 5, 
wherein the digital content Is made up of one 
or more data parts, and 

the use-point location Information is ex- 
pressed by sequence information that is given to 
20 one of the one or more data parts, the one or more 
data parts each being given sequence information 
showing a sequence from a start of the digital con- 
tent. 

25 9. The digital content management device of Claim 1 , 
further comprising, 

a random-number generating unit operable to 
generate a random number and include the random 
number as one item of each of the first management 

30 information and the second management Informa- 
tion. 

10. The digital content management device of Claim 1 , 
further comprising, 

35 an identification information obtaining unit op- 

erable to obtain identification information for identi- 
fying the digital content, 

wherein the first management information 
and the second management information each In- 
*o elude the identification information. 

11. The digital content management device of Claim 
10, further comprising, 

a hash-value comparing unit operable to com- 
45 pare a hash-value for the digital content read from 
the first storing unit with a hash-value included in 
the second management Information read from the 
second storing unit, to Judge whether the dlglta' con- 
tent is permitted to be used or not, 
so wherein the identification information includes 

a hash-value for the digital content. 

12. The digital content management device of Claim 
10, 

55 v/herein the first storing unit encrypts the dig- 

ital content using an encryption key before storing 
the digital content, and 

the identification information includes the en- 
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cryptlon key, 

the digital content man agement device further 
comprising, 

an encryption key comparing unit operable to 
compare the encryption key Included in the identifi- 
cation information read from the first storing unit 
with the encryption key included in the identification 
information read from the second storing unit, to 
Judge whether the digital content Is permitted to be 
used or not. 

1 3. The digital content management device of Claim 1 , 

wherein the second storing unit is a nonvola- 
tile memory. 

14. A digital content management program, compris- 
ing: 

a first storing step of storing digital content and 
first management information for the digital 
content; 

a second storing step of storing second man- 
agement Information for the digital content; 
a management information updating step of up- 
dating the first management information stored 
in the first storing step and the second manage- 
ment Information stored In the second storing 
step, when the digital content !s used; and 
a management information judging step of 
Judging whether the digital content is permitted 
to be used or not, by comparing the first man- 
agement Information stored In the first storing 
step with the second management information 
stored in the second storing step. 

15. The digital content management program of Claim 
14, further comprising: 

a management information encrypting step of 
encrypting the first management information to 
be stored In the first storing step; and 
a management Information decrypting step of 
decrypting the first management information 
stored in the first storing step. 

16. The digital content management program of Claim 
14, further comprising: 

a first encoding step of encoding thB first man- 
agement information to be stored in the first 
storing step; and 

a second encoding step of encoding the second 
management information stored in the second 
storing step. 

17. The digital content management program of Claim 
'4, further comprising: 
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a first encoding step of encoding the first man- 
agement Information stored In the first storing 
step; and 

a second encoding step of encoding the second 
management Information to be stored in the 
second storing step. 

18. The digital content management program of Claim 
1 4, further comprising: 

a location obtaining step of obtaining use-point 
location Information showing a location of a 
use-point at which the digital content is used; 
an end- location storing step of storing end- 
point location information showing a location of 
an end-point at which the digital content is end- 
ed to be used; 

a location judging step of judging whether the 
digital content is permitted to be used or not, by 
comparing the end-point location information 
stored In the end-location storing step with the 
use-point location Information obtained by the 
location obtaining step; and 
a final judging step of judging that the digital 
content is permitted to be used, only when judg- 
ment results In the management information 
judging step and the location judging step are 
both affirmative. 



30 ig. The digital content management program of Claim 
18, 

wherein In the end-location storing step, the 
end-point location information Is encrypted and 
stored. 

35 

20. The digital content management program of Claim 
18, 

wherein the digital content is made up of one 
or more data parts, and 

40 the use-point location information is ex- 

pressed by sequence information that is given to 
one of the one or more data parts, the one or more 
data parts each being given sequence information 
showing a sequence from a start of the digital con- 

45 tent. 



21 . The digital content management program of Claim 
14, further comprising, 

a random-number generating step of gener- 
ating a random number and including the random 
number as one Item of each of the first management 
information and the second management informa- 
tion. 
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22. The digital content management program of Claim 
14, further comprising, 

an Identification information obtaining step of 
obtaining Identification Information for identifying 
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the digital content, 

wherein the first management Information 
and the second management Information each in- 
clude the identification Information. 

5 

23. The digital content management program of Claim 
22, further comprising, 

a hash -value comparing step of comparing a 
hash-value for the digital content stored In the first 
storing step with a hash -value Included in the sec- 10 
ond management information stored In the second 
storing step, to judge whether the digital content Is 
permitted to be used or not, 

wherein the identification information includes 
a hash-value for the digital content. is 

24. The digital content management program of Claim 
22, 

wherein in the first storing step the digital con- 
tent is encrypted using an encryption key before the 20 
digital content is stored, and 

the Identification information Includes the en- 
cryption key, 

the digital content management program fur- 
ther comprising, an encryption key comparing step 25 
of comparing the encryption key Included in the 
identification information stored In the first storing 
step with the encryption key Included in the identi- 
fication information stored in the second storing 
step, to judge whether the digital content is permit- 30 
ted to be used or not. 
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